Security and certificate management for electronic business to business transactions

A computer readable storage medium storing a computer program, the computer program comprising instructions executable by a computer to:

• receive a first procurement document exchange certificate from a server computer system;
• transmit at least a portion of the first procurement document exchange certificate directed to a computing device for use to verify a signature of a later transmitted procurement document;
• receive at least a portion of a second procurement document exchange certificate including a public key from the computing device;
• receive input to trigger a transmission of the procurement document to the computing device;
• automatically sign, in response to the received input, the procurement document;
• and
• automatically encrypt the signed procurement document using the public key in response to the received input, the encrypted procurement document for transmission directed to the computing device.

A computer readable storage medium storing a computer program, the computer program comprising instructions executable by a computer to:

• transmit a certificate request to a server computer system;
• receive a first procurement document exchange certificate from the server computer system, the first procurement document exchange certificate generated at the server computer system using information in the request;
• receive at least a portion of a second procurement document exchange certificate transmitted from a computing device;
• transmit at least a portion of the first procurement document exchange certificate including a public key to the computing device;
• receive a signed and encrypted procurement document, the signed and the encrypted procurement document encrypted by the computing device using the public key;
• automatically decrypt the encrypted procurement document using the private key;
• and
• automatically verify the signature of the decrypted procurement document using the received portion of the second procurement document exchange certificate.

A system for an exchange of procurement documents, the system comprising:

• a first computing device configured to:
• transmit at least a portion of the first procurement document exchange certificate received from a server computer system;
• receive at least a portion of a second procurement document exchange certificate including a public key from a second computing device;
• sign a procurement document;
• encrypt the signed procurement document using the public key in response to the received input;
• and
• transmit the encrypted procurement document directed to the second computing device;
• and
• the second computing device, in communication with the first communication device, and configured to:
• receive the second procurement document exchange certificate from the server computer system, the second procurement document exchange certificate associated with a private key;
• receive the at least a portion of the first procurement document exchange certificate transmitted from the first computing device;
• transmit the at least a portion of the second procurement document exchange certificate including the public key to the first computing device;
• decrypt the encrypted procurement document received from the first computing device using the private key;
• and
• verify the signature of the decrypted procurement document using the received portion of the first procurement document exchange certificate.